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Listing of and Amendments to the Claims 

This listing of, and amendment to, the claims will replace all previous 
versions of the claims: 

1 . (currently amended) Apparatus adapted to communicate via a network, 
comprising: 

a firewall including a set of rules for identifying packets associated with 
inappropriate activity, the rules in the set being separated into a plurality of classes; and 

an indicator device for providing a plurality of user discemable indicators, 
wherein each of the plurality of user discemable indicators is associated with a different 
one of the plurality of classes and is visually discemable , and wherein a respective one of 
said plurality of user discemable indicators is triggered if one or more of the rules 
corresponding to one of said plurality of classes associated with the respective one of said 
plurality of user discemable indicators is violated, 

wherein the rules in the set are prioritized such that each of the plurality of classes 
represents a respective different one of a plurality of priority leve^ 

wherein each of the plurality of user discemable indicators except a particular one 
is associated with the respective different one of the plurality of classes, the particular 
one of the plurality of user discemable indicators being associated with an affirmative 
status that filtering is being contemporaneously performed for any of the packets that 
violate the one or more rules, and wherein the method further comprises filtering any of 
the packets that violate the one or more rules, and wherein the particular one of the 
plurality of user discemable indicators is concurrently triggered, along with the respective 
one of the plurality of user discemable indicators, to indicate that the filtering is being 
contemporaneously performed, only when a number of the packets that violate the one or 
more rules exceeds a pre-specified threshold . 
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2-5. (cancelled) 

6. (previously presented) The apparatus of claim 1, wherein the plurality of user 
discernable indicators comprises a highlighted icon displayed on a computing device. 

7. (currently amended) A method, comprising: 

defining a set of rules to detect inappropriate communication activity on a 
computer or network; 

separating the rules in the set into a plurality of classes; 

associating each of the plurality of classes with a different one of a plurality of 
user discernable indicators that are each visually discernable ; 

examining data traffic to determine whether at least one of the rules has been 
violated; and 

in the case that at least one of the rules of a first one of said plurality of classes 
has been violated, filtering said data traffic violating the at least one of the rules of the 
first one of said plurality of classes, providing a user discernable notification of said 
violation by triggering a respective one of the plurality of user discernable indicators 
associated with the first one of said plurality of classes, and wherein the rules in the set 
are prioritized such that each of the plurality of classes represents a respective different 
one of a plurality of priority levels,, 

wherein each of the plurality of user discernable indicators except a particular one 
is associated with the different one of the plurality of classes, and the method further 
comprises: 

associating the particular one of the plurality of user discernable indicators with 
an affirmative status that filtering is being contemporaneously performed for any of the 
packets that violate at least one of the rules; and 

in the case of the rule of at least a first class from among the plurality of classes 
being violated and a number of packets violating the rule of at least the first class 
exceeding a pre-specified threshold, providing a user discernable notification of the 
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filtering being contemporaneously performed by triggering, concurrently with the 
triggering of the respective one of the plurality of user discernable indicators, the 
particular one of the plurality of user discemable indicators associated with the 
affirmative status that the filtering is being contemporaneously performed . 

8. (original) The method of claim 7, further comprising: 

determining if a first threshold level of rule violation has been exceeded prior to 
filtering said data traffic. 

9. (original) The method of claim 7, further comprising: 

determining if a first threshold level of rule violation has been exceeded prior to 
triggering the user discernable indicator. 

10-15. (cancelled) 

16. (currently amended) A cable modem, comprising: 
downstream processing circuitry; 
upstream processing circuitry; 

a controller in communication with said downstream circuits, upstream circuitry, 
and a memory; 

a firewall program including a set of rules for identifying packets associated with 
inappropriate activity, the rules being separated into a plurality of classes, said firewall 
program being resident in said memory and executable by said controller to cause 
examining data of packets from said downstream and upstream circuitry; and 

a plurality of user discernable indicators that are each visually discernable , 
wherein each of the plurality of user discernable indicators is associated with a different 
one of the plurality of classes and wherein a respective one of said plurality of user 
discernable indicators is triggered if one or more of the rules corresponding to one of said 
plurality of classes associated with the respective one of said plurality of user discernable 
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indicators is violated, and wherein the rules in the set are prioritized such that each of the 
plurality of classes represents a respective different one of a plurality of priority levels,, 
wherein the firewall program is executable by said controller to cause filtering 
any of the packets that at least one of the rules, and wherein each of the plurality of user 
discernable indicators other than a particular one is respectively associated with the 
different ones of the plurality of classes, the particular one of the plurality of user 
discernable indicators being associated with an affirmative status that filtering is being 
contemporaneously performed, and wherein the particular one of the plurality of user 
discernable indicators is triggered, concurrently with the triggering of the respective one 
of the plurality of user discernable indicators, if the one or more of the rules is violated, 
the filtering is performed by the firewall program, and a number of the packets that 
violate the one or more rule s exceeds a pre-specified threshold . 

17. (cancelled) 

18. (previously presented) The cable modem of claim 16, wherein said plurality 
of user discernable indicators comprises a first LED for signifying a filtering event and a 
second LED for signifying filtering data packets deemed pernicious in said set of rules. 

19. (previously presented) The apparatus of claim 16, wherein said plurality of 
user discernable indicators comprises a highlighted icon displayed on a computer device. 

20. (previously presented) The apparatus of claim 1, wherein the firewall filters 
any of the packets that violate the one or more rules irrespective of a number of the 
packets that violate the one or more rules, but only triggers the respective one of the 
plurality of user discernable indicators when the number of the packets that violate the 
one or more rules exceeds a pre-specified threshold. 
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21. (previously presented) The method of claim 7, wherein the data traffic 
includes a number of packets that violate the at least one of the rules of the first one of 
the plurality of classes, and wherein the method filters the packets that violate the at least 
one of the rules of the first one of the plurality of classes, irrespective of the number of 
packets that violate the one or more rules, but only triggers the respective one of the 
plurality of user discernable indicators when the number of packets that violate the at 
least one of the rules of the first one of the plurality of classes exceeds a pre-specified 
threshold. 

22. (previously presented) The apparatus of claim 1 6, wherein the firewall 
program is executable by said controller to cause filtering of any of the packets that 
violate the one or more rules irrespective of a number of the packets that violate the one 
or more rules, but wherein the respective one of the plurality of user discernable 
indicators is triggered only when the number of packets that violate the one or more rules 
exceeds a pre-specified threshold. 

23. (cancelled) 

24. (currently amended) The apparatus of [claim 23] claim 1 , wherein only the 
particular one of the plurality of user discernable indicators is triggered if the one or more 
of the rules is violated, the filtering is performed by the firewall program, and the number 
of the packets that violate the one or more rules does not exceed the pre-specified 
threshold. 

25. (cancelled) 

26. (previously presented) The apparatus of claim 1, wherein whether the 
respective one of the plurality of user discernable indicators is triggered or not is based 
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on which of the plurality of priority levels is involved with respect to a corresponding 
rule violation. 

27. (cancelled) 

28. (currently amended) The method of [claim 27] claim 7 , wherein in the case 
of the rule of at least the first class being violated and the number of packets violating the 
rule of at least the first class not exceeding the pre- specified threshold, only providing the 
user discernable notification of the filtering without providing the user discernable 
notification of the violation. 

29. (cancelled) 

30. (previously presented) The method of claim 7, wherein whether the 
respective one of the plurality of user discernable indicators is triggered or not is based 
on which of the plurality of priority levels is involved with respect to a corresponding 
rule violation. 

31. (cancelled) 

32. (currently amended) The apparatus of Tclaim 311 claim 16 , wherein only the 
particular one of the plurality of user discernable indicators is triggered if the one or more 
of the rules is violated, the filtering is performed by the firewall program, and the number 
of the packets that violate the one or more rules does not exceed a pre- specified 
threshold. 

33. (cancelled) 
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34. (previously presented) The apparatus of claim 16, wherein whether the 
respective one of the plurality of user discemable indicators is triggered or not is based 
on which of the plurality of priority levels is involved with respect to a corresponding 
rule violation. 

35. (previously presented) The apparatus of claim 1, where each of the plurality 
of classes uses a different one of a plurality of thresholds with respect to how many 
violating ones of the packets must be detected before filtering is commenced, the 
plurality of thresholds being end-user settable. 
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